google/mantis
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
2.4k stars · 209 forks · Python
Caution
Caution: one person wrote most of the recent commits.
Why
- One person wrote 97% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)
What would change this
- A second person takes a substantial share of commits.
Maintenance
CompleteActive
- Human commits, 30 days
- 29
- Human commits, 90 days
- 65
- Human commits, 365 days
- 101
- Bot share of commits, 365 days
- 0%
- Last commit
- Oct 14, 2026 (16 hours ago)
- Last human commit
- Oct 14, 2026 (16 hours ago)
- Authors, 90 days
- 2
- Last release
- none found
- Median PR merge time
- n/a
Responsiveness: of 3 recent issues, n/a got a maintainer reply. Median first response: n/a.
- Only 3 recent issues can be checked for a response, too few to measure response time.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 101 since Oct 15, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 1
- Contributors
- 3
Top committers
- nickg-ca: 97% of commits
- yulongzhang: 2% of commits
- anguillanneuf: 1% of commits
Sources: Commits, Contributors
Stars
CompleteNot enough data, confidence high
Bursts
- Aug 31, 2026 to Sep 16, 2026: about 702 more stars than usual, peak 268 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Oct 1, 2026 to Oct 4, 2026: about 457 more stars than usual, peak 359 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Engagement is low for a repo this size (forks, watchers, issues, contributors).
- 1 stars GitHub has since removed (tracked since Oct 15, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- Not enough star history yet to judge the star count.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Not known
Packages
No published packages found.
Sources: GitHub: google/mantis
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/google/mantis)Earlier verdicts
- Oct 15, 2026: Caution
- Oct 14, 2026: Caution
Computed 3 hours ago · method 2026.10.2